Authenticate

Azure CLI - Delegated User Token

Use this flow to obtain a delegated user token with the API scope configured for AZExecute.

A user's effective tenant role is resolved when the token is processed. After changing an Entra app-role assignment, acquire a fresh token; an existing access token can continue to contain the previous role until it is renewed.

Client Credentials Flow with PowerShell

Use this flow when authenticating as a service principal that has been assigned an API access role.

Authorization Code Flow for Web Apps

This flow is used for web applications where a user needs to log in interactively.

Device Code Flow

This flow is useful when logging in on a device without a browser.